This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json) Hash identifier: 8REnRaDNvWgBFKIagz8Q8UgqxRQqOM8HfC9GkJIU324= Subject key identifier: 70:A0:DE:EA:54:03:C1:4A:E1:51:F2:F1:D9:26:60:56:EC:AE:6E:46 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B3CB5087E49923D5CAA6117E6AE77C090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 17:00:55 +0000 Manifest this update: Sat 20 Dec 2025 17:00:55 +0000 Manifest next update: Sun 21 Dec 2025 17:00:55 +0000 Files and hashes: 1: 1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa (hash: R4A5i2N8JYKg21Uc7Bt5Hjz+LtBEOYUw0Vl9yYmvj1U=) 2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=) 3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: 8DrzJoNRtDbLVYWXNhOBBDOLNnsAWeHuOo5k61xE1Pw=) 4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=) 5: escRk3d2NjI3vOhsunfMskewVFU.roa (hash: zPSViHW+zBVRTJi3BUxGbJ65sQUAitf2bEnfu5wf6oI=) 6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=) 7: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:08:7e:49:92:3d:5c:aa:61:17:e6:ae:77:c0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Dec 20 17:00:55 2025 GMT Not After : Dec 21 17:00:55 2025 GMT Subject: CN=70a0deea5403c14ae151f2f1d9266056ecae6e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:c4:3a:1f:bb:a2:7a:fb:f3:e1:90:55:84: 19:20:b2:17:0c:58:ed:17:51:fb:bd:c9:8c:3d:5f: dd:8a:36:6b:8e:b0:d4:00:d5:1b:f1:51:51:7e:4e: 11:11:4b:a1:4e:a2:3c:bf:2d:fd:77:cb:21:b5:21: fa:60:aa:a8:e5:78:ea:39:2c:ef:d2:35:4d:b7:9a: 97:8c:6a:e9:3f:ae:b5:38:cd:30:d2:29:14:2a:99: 8b:42:ff:98:1e:50:9e:24:ed:d5:24:eb:b4:9c:0e: b3:ab:60:4b:e8:37:0f:6c:10:d2:8c:aa:96:70:1c: 94:77:9f:66:86:2b:43:62:40:fd:07:4c:34:45:03: 9c:0b:26:e2:68:08:ee:7b:cc:39:1e:26:17:f8:0b: 86:44:c5:78:fb:42:14:54:fb:ce:67:42:c8:08:95: ac:6f:be:2c:c8:22:d0:5e:60:01:de:87:71:8d:5e: 18:e7:f2:bf:83:5f:50:37:a8:56:79:50:bb:9b:42: 53:c3:60:c6:80:0e:37:64:f1:d0:15:91:4d:d3:96: 8a:9c:c1:31:d9:2a:b6:34:51:0a:ac:24:48:c6:ad: cb:cb:3b:dd:67:71:03:a9:77:b1:25:47:45:0e:d5: 77:ce:8f:ac:a5:0d:6f:4b:6f:66:72:25:52:5b:e7: 23:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:DE:EA:54:03:C1:4A:E1:51:F2:F1:D9:26:60:56:EC:AE:6E:46 X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a2:fc:0e:68:75:1a:50:68:e0:5b:b2:d3:8e:2d:9c:5a:07: 29:d7:c7:57:f8:08:50:b4:99:fa:71:2e:8f:b4:2d:a6:25:6e: 1c:53:a9:e9:85:24:2d:24:55:10:15:ed:ea:23:80:4d:a1:b0: f1:65:7c:53:cf:31:80:1d:31:42:0c:0e:5a:59:a9:3e:f6:25: ce:e5:df:84:fe:27:16:2a:61:8e:db:1a:64:0f:6e:60:af:03: ec:59:09:c0:d6:f0:5b:f2:38:4a:f5:f1:90:17:4b:e6:dd:bd: 02:4c:cb:e4:b6:cf:3f:d7:75:6c:a2:3e:36:85:07:01:c9:88: 3c:47:0d:cc:ef:08:70:67:a3:ac:4d:45:1d:b3:7f:ac:61:a8: 3f:f8:d0:4d:c3:19:9f:b3:c0:70:3a:6b:48:fc:32:70:af:ff: 24:94:90:35:4c:48:14:6d:1b:ce:8f:8c:06:75:60:b1:27:c1: 9a:58:90:cd:6b:7b:ac:04:c3:b6:e1:72:ba:90:2c:29:ee:7f: 63:f9:85:74:47:93:01:de:20:7a:a1:8f:fc:90:a8:3d:18:37: f6:2b:82:01:1b:dd:ad:39:a7:22:5b:c0:6c:57:ec:5b:df:9e: ea:21:1b:0f:b9:66:8b:59:b3:2d:c0:87:43:dc:ca:d4:a4:79: de:ef:ac:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQh+SZI9XKphF+aud8CQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjUxMjIwMTcwMDU1WhcNMjUxMjIxMTcwMDU1WjAzMTEwLwYDVQQD Eyg3MGEwZGVlYTU0MDNjMTRhZTE1MWYyZjFkOTI2NjA1NmVjYWU2ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygTEOh+7onr78+GQVYQZILIXDFjt F1H7vcmMPV/dijZrjrDUANUb8VFRfk4REUuhTqI8vy39d8shtSH6YKqo5XjqOSzv 0jVNt5qXjGrpP661OM0w0ikUKpmLQv+YHlCeJO3VJOu0nA6zq2BL6DcPbBDSjKqW cByUd59mhitDYkD9B0w0RQOcCybiaAjue8w5HiYX+AuGRMV4+0IUVPvOZ0LICJWs b74syCLQXmAB3odxjV4Y5/K/g19QN6hWeVC7m0JTw2DGgA43ZPHQFZFN05aKnMEx 2Sq2NFEKrCRIxq3LyzvdZ3EDqXexJUdFDtV3zo+spQ1vS29mciVSW+cjQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCg3upUA8FK4VHy8dkmYFbsrm5GMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaL8Dmh1 GlBo4Fuy044tnFoHKdfHV/gIULSZ+nEuj7QtpiVuHFOp6YUkLSRVEBXt6iOATaGw 8WV8U88xgB0xQgwOWlmpPvYlzuXfhP4nFiphjtsaZA9uYK8D7FkJwNbwW/I4SvXx kBdL5t29AkzL5LbPP9d1bKI+NoUHAcmIPEcNzO8IcGejrE1FHbN/rGGoP/jQTcMZ n7PAcDprSPwycK//JJSQNUxIFG0bzo+MBnVgsSfBmliQzWt7rATDtuFyupAsKe5/ Y/mFdEeTAd4geqGP/JCoPRg39iuCARvdrTmnIlvAbFfsW9+e6iEbD7lmi1mzLcCH Q9zK1KR53u+sPQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:34 2025 by rpki-client